CVE-2002-0212

Published: May 16, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.

Affected (5)

Products: Hosting Controller: Hosting Controller

Hosting Controller

1 product

Hosting Controller

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hosting Controller Hosting Controller	Version 1.1
Hosting Controller Hosting Controller	Version 1.3
Hosting Controller Hosting Controller	Version 1.4.1
Hosting Controller Hosting Controller	Version 1.4
Hosting Controller Hosting Controller	Version 1.4b